Haxoris Wiki

No Root/Jailbreak Detection

How No Root/Jailbreak Detection works

Without robust root/jailbreak detection and response, attackers can run the app on compromised devices with powerful hooking frameworks, intercept traffic, and tamper with storage and runtime.

No Root/Jailbreak Detection in practice

Bypass Naive Checks

Basic checks for su binaries or known package names are easily bypassed. Use Frida to patch return values:

frida -U -f com.example.app -l - --no-pause <<'JS'
Java.perform(function () {
  var Sec = Java.use('com.example.app.security.RootChecks');
  Sec.isDeviceRooted.implementation = function () { return false; };
});
JS

If the app continues to function normally on a rooted device, detection is insufficient.

How to fix and prevent No Root/Jailbreak Detection

  1. Layered detection and response
    • Combine file, syscall, hook, and environment checks; degrade functionality or block sensitive flows.
  2. Attestation
    • Enforce Play Integrity/SafetyNet or App Attest to detect compromised environments.
  3. Protect critical paths
    • Gate secrets and high‑risk actions behind server checks; assume client signals can be spoofed.

Last updated

References